Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

NGX R65 (Site - Site VPNs ) connected to a Management station

Status
Not open for further replies.

tbird1990

IS-IT--Management
Feb 12, 2008
6
US
When I enlarge the encryption domain, VPN client are able to establish a connection but the LAN is dropped When I reduce the encryption domain, LAN is able to stay connected but the VPN Client drops.
 
Are you using office mode for your Secure client users? Add the firewall object and the office mode pull to the enc domain and test.
 
From the title this appears to be a SIte to SIte and not a Remote Access VPN as indicated by the previous posted.
Checkout the many SecureKnowledge articles regarding superbetting. THis in conjunction with overlapping encryption domains could cause LAN connectivity issues because it will try to match all LAN traffic to the VPN. Providing the remote and local encryption domains may be helpful in understanding what is happening. Also look into turing on ikeview debugs. This will also show you if the traffic is incorrectly being matched for the tunnel.

Supernetting:

Ikeview:

IT Security news and information
In plain English
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top